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APPARATUS AND METHOD FOR CONTROLLING EXECUTE-IN- 
PLACE (XIP) IN SERIAL FLASH MEMORY, AND FLASH MEMORY 

CHIP USING THE SAME 

[01] This application claims the priority of Korean Patent Application No. 
10-2003-0001449 filed January 9, 2003, in the Korean Intellectual Property 
Office, the disclosure of which is incorporated herein in its entirety by 
reference. 

BACKGROUND OF THE INVENTION 

1. Field of Invention 

[02] The present invention relates to an apparatus and method for 
controlling execute-in-place (hereinafter, referred to as "XIP") in a serial flash 
memory and a flash memory chip using the same, and more particularly, to an 
apparatus and method for controlling XIP in a serial flash memory and a flash 
memory chip using the same, wherein required data are retrieved or executed 
by accessing the serial flash memory through a hardware controller with a 
predetermined amount of storage capacity. 

2. Description of the Related Art 

[03] In general, a flash memory is a writable memory that has non-volatility 
allowing recorded contents to be preserved even if power is not supplied 
thereto, like a ROM (Read Only Memory). The flash memory is largely 



classified into a parallel flash memory (hereinafter, referred to as "parallel 
flash") in which cells are arranged in parallel between bit lines and a ground 
line, and a serial flash memory (hereinafter, referred to as "serial flash") in 
which the cells are arranged in series therebetween, according to the 
fabrication method of the flash memory. 

[04] The parallel flash typically includes an EEPROM (Electrically 
Erasable Programmable Read Only Memory), a NOR type flash, and a 
DINOR (Divided Bit-line NOR) type flash that is a variant of the NOR type 
flash. The parallel flash is a device that allows addresses to be accessed based 
on byte unit in such a manner that read and write operations can be performed 
with respect to an arbitrary address irrespective of the order of the cells 
(random access). 

[05] However, since the parallel flash requires contact electrodes of the bit 
lines for the respective cells, there is a disadvantage in that the area of each 
cell increases as compared with the serial flash. 

[06] The serial flash typically includes a NAND and an AND. The serial 
flash is a block device that allows addresses to be accessed based on block unit 
in such a manner that a relevant block is first selected and respective cells 
connected in series to one another are then read. 

[07] A block in the serial flash means a unit capable of being deleted with 
one delete operation, and a page means a data size capable of being read or 
written during read/write operations. 
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[08] Since such a serial flash has advantages of higher write speed, 
relatively lower cost, and facilitation of increase in its capacity as compared 
with the parallel flash, it has been widely used for storing large volumes of 
data. However, since it does not allow access based on byte unit, it cannot 
provide the XIP function by which recorded data are directly executed without 
transferring them to a main memory. 

[09] Therefore, the serial flash is generally used as an auxiliary data storage 
device, and boot codes for system booting are stored in a ROM or the serial 
flash is divided to manage the boot codes and data. 

[10] Alternatively, the serial flash is generally used as an auxiliary data 
storage device, and the boot codes for system booting are stored in a XIP- 
enabled NOR flash memory, or a ROM. 

[11] FIG. la shows a system booting process using the conventional NOR 
flash memory, and FIG. lb shows a system booting process using the serial 
flash. 

[12] As shown in FIG. la, since access based on byte unit can be performed 
in the NOR flash memory, the system booting is performed in such a manner 
that a main control unit of a system directly reads operating system (OS) boot 
codes including OS images and data for system booting from the NOR flash 
memory. 

[13] As shown in FIG. lb, since the access based on byte unit cannot be 
performed in the serial flash memory contrary to the NOR flash memory or 
ROM, the data for system booting are read from a boot loader of a boot ROM 
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(1); and an entire page to which the OS boot codes including the OS images 
required for the system booting belong is read from the serial flash and then 
copied to the main memory, and the OS images are then read and transmitted 
to the main control unit (2). 

[14] That is, in order to provide the OS images for system booting that are 
required by the main control unit, the entire page to which the OS boot codes 
belong is read from the serial flash and written in the main memory, and only 
the OS images are read from the main memory and transmitted to the main 
control unit. Thus, the main control unit can perform the system booting (OS 
loading) (3). 

[15] In such a way, since the serial flash does not support the XIP function 
contrary to the NOR flash memory, which is the parallel flash, or the ROM, in 
order to execute the OS boot codes required for system booting, the OS boot 
codes should be transferred to the main memory to be executed therein. Thus, 
there are problems in that execution time is delayed and the available amount 
of storage capacity in the main memory is reduced due to the boot codes 
transferred to the main memory. 

[16] In particular, since the size of the operating system recently tends to be 
larger due to the variety of application programs and additional functions (e.g., 
16 to 32MB in case of WinCE), there is a problem in that the efficiency of 
memory is deteriorated since the amount of storage capacity occupied by the 
boot codes read from the serial flash becomes larger in the main memory. 
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[17] Therefore, there is a current need for a serial flash which can store 
programs by using a larger amount of memory capacity at a lower or same 
cost and support the XIP function so as to directly execute data on the flash 
memory, if necessary. 

SUMMARY 

[18] An object of the present invention is to enable the XIP function to be 
supported by a serial flash in such a manner that a serial flash controller with a 
predetermined amount of storage capacity accesses the serial flash, reads an 
entire page to which required data belong, and transmits the desired data to a 
main control unit or executes the data. 

[19] Further, another object of the present invention is to provide a serial 
flash controller and a serial flash, which can support the XIP function, in the 
form of a flash memory chip and to enable a conventional ROM to be replaced 
with the flash memory chip. 

[20] An apparatus for controlling XIP in a serial flash according to the 
present invention comprises a cache module for accessing a designated 
memory address of the serial flash in response to a command received from a 
main control unit through a system interface unit, and reading or writing data 
required by the main control unit; a serial flash controller with a boot loader 
for allowing system booting to be performed by reading boot codes written on 
the serial flash, storing the boot codes in a buffer and immediately transmitting 
the boot codes to the main control unit when the main control unit requires the 
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boot codes; and a flash interface unit for handling transmission/reception of 
data among the cache module, the serial flash controller and the serial flash. 
[21] A method for controlling XIP in a serial flash according to the present 
invention comprises comprising the steps of accessing the serial flash, reading 
boot codes for initial booting, and storing them in a buffer, when power is 
supplied to a system; and if the boot codes are completely stored and the boot 
codes are required by a main control unit of the system, reading the boot codes 
from the buffer, transmitting them to the main control unit and processing an 
operation required by the main control unit. 

[22] A flash memory chip using the apparatus for controlling the XIP in the 
serial flash according to the present invention comprises a serial-cell type 
serial flash; and a controller for accessing the serial flash, and directly 
providing boot codes for system booting which are stored beforehand in a 
buffer, or reading or writing relevant data by accessing a designated memory 
address, in response to an operation required by a main control unit of a 
system. 

BRIEF DESCRIPTION OF THE DRAWINGS 
[23] The above and other objects and features of the present invention will 
become apparent from the following description of an exemplary embodiment 
given in conjunction with the accompanying drawings, in which: 
[24] FIGS, la and lb show processes of executing XIP by using a 
conventional NOR flash memory and a conventional serial flash, respectively; 
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[25] FIG. 2 is a block diagram schematically showing configurations of a 
serial flash and a flash memory access apparatus according to the present 
invention; 

[26] FIG. 3 is a block diagram schematically showing a configuration of an 
apparatus for controlling XIP in the serial flash according to the present 
invention; 

[27] FIG. 4 shows schematically a configuration of a data-storing unit in 
FIG. 3; 

[28] FIG. 5 is an operational flowchart schematically illustrating a 
processing procedure of a method for controlling the XIP in the serial flash 
according to the present invention; 

[29] FIG. 6 is an operational flowchart illustrating a processing procedure 
for a boot read command received from a main control unit in step S5 of FIG. 
5; 

[30] FIG. 7 is an operational flowchart illustrating a processing procedure 
for a serial ID read command received from the main control unit in step S5 of 
FIG. 5; 

[31] FIG. 8 is an operational flowchart illustrating a processing procedure 
for a write command received from the main control unit in step S5 of FIG. 5; 
[32] FIG. 9 is an operational flowchart illustrating a processing procedure 
for a read command received from the main control unit in step S5 of FIG. 5; 
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[33] FIG. 10 is an operational flowchart illustrating a processing procedure 
for a case where data required by the main control unit do not exist in the data- 
storing unit according to an embodiment of the present invention; and 
[34] FIG. 1 1 is an operational flowchart illustrating a processing procedure 
for a case where the data required by the main control unit exist in the data- 
storing unit according to the embodiment of the present invention. 

DESCRIPTION 

[35] Embodiments of an apparatus and method for controlling XIP in a 
serial flash, and a flash memory chip using the same according to the present 
invention will be first described in detail with reference to the accompanying 
drawings. 

[36] FIG. 2 shows the apparatus for controlling the XIP in the serial flash 
and a serial flash access apparatus therefor according to the present invention. 
[37] As shown in FIG. 2, the serial flash access apparatus comprises the 
serial flash 100, a main control unit 300 of a system for generating control 
commands for reading/writing data from/to the serial flash 100, and a control 
apparatus 500 (hereinafter, referred to as "controller") for performing relevant 
operation control by accessing the serial flash in response to the control 
commands generated from the main control unit 300. 

[38] The serial flash 100 is a cell type serial flash memory. For example, a 
NAND flash that is a kind of serial flash having 528 bytes consists of a data 
block of 512 bytes and a spare block of 16 bytes. 
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[39] As separately shown in FIG. 2, the data block of the serial flash 
comprises a boot area (100KB) 101 on which boot codes for initially booting 
an operating system (OS) are recorded, an operating system area (20MB) 103 
on which the operating system and application programs are recorded, a data 
area (20MB) 105 on which data for executing the programs written on the 
operating system area 103 are recorded, and a file system area (24MB) 107 on 
which signals generated during operations of the operating system and data 
input by a user are recorded. 

[40] FIG. 3 is a block diagram schematically showing the configuration of 
the controller 500 for controlling the XIP in the serial flash 100 of the present 
invention in the serial flash access apparatus. 

[41] As shown in FIG. 3, the controller 500 mainly comprises a system 
interface unit 510 for transmitting and receiving signals to/from the main 
control unit 300; a cache module 530 (hereinafter, referred to as "cache") for 
accessing memory addresses of the serial flash 100 designated in response to 
commands from the main control unit 300 received through the system 
interface unit 510 and reading or writing data required by the main control unit 
300; a serial flash controller 550 allowing system booting to be performed by 
reading the boot codes recorded in the serial flash 100, storing the boot codes 
in a buffer and immediately transmitting them when the main control unit 300 
requests the boot codes; a flash interface unit 570 for handling 
transmission/reception of data between the cache 530 or the serial flash 
controller 550 and the serial flash 100; and a buffer (not shown) for 
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temporarily storing data read from the serial flash 100 during the process of 
accessing the serial flash. 

[42] The cache 530 of the controller 500 constructed as such is provided for 
allowing the main control unit 300 to more rapidly access the data of the serial 
flash 100, and comprises an L2-cache that is a secondary or Level Two cache 
memory. 

[43] As shown in FIG. 3, the cache 530 comprises a cache controller 531, a 
tag-storing unit 533, and a data-storing unit 535. 

[44] The cache controller 531 allows the serial flash 100 to be efficiently 
accessed by referring to the tag-storing unit 533 and the data-storing unit 535 
in response to read or write commands required by the main control unit 300. 
[45] That is, if a write command for a specific memory address is received 
from the main control unit 300, the cache controller 531 accesses a relevant 
address of the serial flash 100 and writes data which are required to be 
recorded; and if a read command is received, it determines through the tag- 
storing unit 533 whether data that are required to be read are stored in the 
data-storing unit 535. 

[46] The cache controller 531 reads the relevant data from the data-storing 
unit 535 in accordance with the determination result and transmits them to the 
main control unit 300; or accesses the serial flash 100, reads the entire page to 
which the relevant data belong, stores it in the buffer and transmits the 
required data to the main control unit 300. Further, the cache controller 
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writes the read page and its storage information on the tag-storing unit 533 and 
the data-storing unit 535. 

[47] The storage information on the data read from the serial flash 100 by 
the cache controller 531 (e.g., the memory address of the read page in the 
serial flash, the stored address of the read page) is recorded in the tag-storing 
unit 533 that comprises the Static Random Access Memory (SRAM). 
[48] The data read from the serial flash 100 in response to the operation 
control of the cache controller 531 are recorded in the data-storing unit 535 
that comprises the SRAM. 

[49] In FIG. 4, a configuration of a data-storing unit 535 is shown.. The 
data-storing unit 535 consists of an address map of the serial flash 100 on 
which the page read from the serial flash 100 by the cache controller 531 is 
recorded, and the cache controller 531 accesses the serial flash 100 through 
the data-storing unit 535 and provides the data required by the main control 
unit 300. 

[50] With the use of the cache 530, access time to the serial flash 100 can 
be reduced and it is possible to freely access the serial flash for the operations 
of reading and writing the data in the main control unit 300. 
[51] That is, in case of data written in the same page, the time required for 
accessing the data recorded in the serial flash 100 generally becomes a 
predetermined access time (e.g., about 50ns). However, in case of data written 
in different pages, the time becomes about lOjxs, which is relatively long. The 
page accessed through the cache 530 and its storage information are written on 
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the tag-storing unit 533 and the data-storing unit 535, so that when data on the 
same page are required by the main control unit 300, the required data can be 
provided through the data-storing unit 535 without directly accessing the serial 
flash 100. Thus, the data that have been accessed once can be utilized 
efficiently and access time can be reduced. 

[52] In addition, the serial flash controller 550 of the controller 500 
comprises a boot loader 551, a prefetch 553, an error detection code/error 
correction code (hereinafter, referred to as "EDC/ECC") 555, and a decomp 
557. 

[53] The boot loader 551 is to efficiently execute system booting. If power 
is supplied, the boot loader 551 causes the booting to start by reading the 
operating system recorded on the boot area 101 of the serial flash 100 and 
initialize codes such as images for the system booting, storing them in the 
buffer, and transmitting the stored initialize codes to the main control unit 300 
if the main control unit 300 initiates a first code fetch cycle and requests the 
reading of the boot codes. The prefetch 553, the EDC/ECC 555, and the 
decomp 557 are to improve the performance of the controller 500. The 
prefetch 553 reads beforehand data which are expected to be read by the main 
control unit 300, and stores the data in the buffer; the ECC/EDC 555 detects 
and corrects errors of transmitted and received data; and the decomp 557 
processes data compression and decompression required in accordance with 
system characteristics. 



12 



[54] The decomp 557 is provided in accordance with the system 
characteristics but may not be provided if necessary. 

[55] The system booting can be efficiently executed in such a manner that 
the main control unit 300 reads the data required for the booting from the 
serial flash 100 through the serial flash controller 550 upon the initial booting 
of the system. 

[56] For reference, in the controller 500 according to the embodiment of the 
present invention, all modules may be implemented with hardware or 
software, or some of them may be implemented with software. 
[57] Therefore, it will be apparent that implementing the controller for the 
XIP in the serial flash with the hardware or software according to the 
embodiment of the present invention does not depart from the scope of the 
invention, and changes and modifications may be made in accordance with the 
implementation of the controller with the software and/or hardware without 
departing from the scope of the invention. 

[58] With the use of the controller 500 for the XIP in the serial flash 100 
constructed as such, a serial flash chip capable of supporting the XIP is 
obtained by constructing the controller 500 and the serial flash 100 as one 
chip. 

[59] The user can substitute a ROM or NOR flash memory with the serial 
flash 100 by using the serial flash chip. 
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[60] An XIP method in the serial flash 100 through the controller 500 for 
the XIP in the serial flash 100 constructed as such will be performed as shown 
in FIG. 5. 

[61] When power is first supplied to the system (SI), the boot loader 551 of 
the controller 500 accesses the boot area 101 of the serial flash 100, 
sequentially reads the boot codes for the initial booting, and stores them in the 
buffer (S2). 

[62] Then, the controller 500 determines whether the codes read by the boot 
loader 551 are completely stored in the buffer (S3). If it is determined that the 
storage of the codes is not completed, the codes that are being read are 
continuously stored in the buffer. If it is determined that the storage is 
completed, in order to process a command (e.g., read or write operation 
control signal for data stored in a specific address) requested by the main 
control unit 300, the controller 500 determines whether the command is 
received through the system interface module 510 (S4). 

[63] If it is determined that there is no command received from the main 
control unit 300, the procedure returns to the routine of determining whether a 
command is received or not. If it is determined that there is a command, 
command processing is made through the operation control corresponding to 
the received command (S5). 

[64] In the XIP method in the serial flash 100 performed in such operation 
processes, an operation process for the command received from the main 
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control unit 300 will be described in detail with reference to the accompanying 
drawings. 

[65] FIG. 6 shows a processing procedure for a case where a boot read 
command for causing the booting code data required for system booting to be 
read is received from the main control unit 300 in accordance with the first 
code fetch cycle. 

[66] As shown in FIG. 6, after the main control unit 300 is reset, if the boot 
read command is received from the main control unit 300 while initiating the 
first code fetch cycle (Sll), the controller 500 reads the booting codes, which 
were read from the serial flash 100 and then stored in the buffer (S12), and 
transmits the read boot codes to the main control unit 300 (SI 3). 
[67] FIG. 7 shows a processing procedure for a case where a serial flash ID 
read command for causing a serial flash ID recorded on the serial flash 100 
and information on devices used in the system to be read is received from the 
main control unit 300. 

[68] As shown in FIG. 7, if the serial flash ID read command is received 
from the main control unit 300 (S21), the controller 500 performs a control 
operation for reading the serial flash ID to provide serial flash ID data required 
by the main control unit 300 through the cache controller 531 of the cache 530 
(S22). 

[69] The control operation for reading the serial flash ID is performed by 
accessing the serial flash 100, reading a page to which the serial flash ID data 



15 



required by the main control unit 300 belong, and storing the read page in the 
buffer. 

[70] The serial flash ID data required by the main control unit 300 are 
extracted from the page that has been read and stored in the buffer in 
accordance with the control operation for reading the serial flash ID (S23), and 
the extracted serial flash ID data are transmitted to the main control unit 300 
(S24). 

[71] FIG. 8 shows a processing procedure for a case where a write 
command for causing predetermined data to be recorded on the serial flash 
100 is received from the main control unit 300. 

[72] As shown in FIG. 8, if the write command is received from the main 
control unit 300 together with a predetermined logic address, the controller 
500 receives the data transmitted from the main control unit 300 and stores 
them in the buffer (S32). 

[73] When the data is completely received, a control operation for a serial 
flash write cycle, which determines a memory address on which the data will 
be written through a physical address of the serial flash 100 assigned by means 
of mapping and writes information about the mapping between the logic 
address and the physical address changed in response to the write operation on 
a mapping table, is performed (S33). 

[74] If the address in which the data will be stored is determined through 
the cycle control operation, the data stored in the buffer are read and then 
written at a designated physical address of the serial flash (S34). 
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[75] FIG. 9 shows a processing procedure for a case where a read command 
for causing predetermined data written on the serial flash 100 to be read is 
received from the main control unit 300. 

[76] As shown in FIG. 9, if the read command is received from the main 
control unit 300 (S41), the controller 500 searches for a physical address on 
which data corresponding to a logic address received together with the read 
command from the main control unit 300 are written, by referring to the 
mapping table of the serial flash 100. 

[77] Then, the controller performs a serial flash read cycle control process 
in which it is determined whether a page corresponding to a range of the 
searched physical address is stored in the data-storing unit 535, by referring to 
the tag-storing unit 533 of the cache 530 through the searched physical address 
(S42). 

[78] If it is determined through the serial flash read cycle control process 
that data required to be read by the main control unit 300 are stored in the 
data-storing unit 535, the relevant data are extracted from the data-storing unit 
535 and then transmitted to the main control unit 300. If not, the entire page 
to which data written at a relevant physical address belong is read by 
accessing the serial flash 100 (S43). 

[79] The cache controller 531 of the cache 530 stores the read page in the 
buffer (S44), and extracts the data that is required to be read are extracted and 
transmitted to the main control unit 300 (S45). 
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[80] Further, the read page and its address information are written on the 
tag-storing unit 533 and the data-storing unit 535 (S46). 

[81] The XIP method in the serial flash 100 according to an embodiment of 
the present invention performed as described above will be described in detail 
with reference to the accompanying drawings. 

[82] If power is supplied to the system, the controller 500 reads the boot 
codes for the initial booting from the serial flash 100 and stores them in the 
buffer. When the boot read command is received while the first code fetch 
cycle is initiated in the main control unit 300, the controller 500 transmits the 
boot codes stored in the buffer to the main control unit 300. 
[83] The main control unit 300 prepares initialization by an initialization 
and ROM code jump command included in the initial boot codes. 
[84] After the main control unit 300 finishes preparation of the 
initialization, it accesses the data-storing unit 535 by referring to the tag- 
storing unit 533 comprising the address map of the serial flash 100 and 
transmits the data required by the main control unit 300 to the main control 
unit 300 through a data bus. The main control unit 300 immediately executes 
the transmitted data to initiate the booting. 

[85] If an interface between the main control unit 300 and the serial flash 
100 is made through the controller 500 in such a way, the main control unit 
300 directly accesses the data written on the serial flash 100 without going 
through the main memory, so that XIP can be realized. 
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[86] That is, the controller 500 defines necessary functions such as 
read/write/erase/program in response to a request from the main control unit 
300, and refers to the tag-storing unit 533 and then determines whether an 
address corresponding to the memory address required to be read by the main 
control unit 300, which has been stored in the data-storing unit 535, is written. 
[87] If it is determined that there is an address corresponding thereto, the 
relevant data are read from the data-storing unit 535 and transmitted to the 
main control unit 300. If not, the controller 500 accesses the serial flash 100, 
reads an entire page to which the relevant data belong, stores them in the 
buffer, transmits the data at the required address to the main control unit 300, 
and writes the read page on the tag-storing unit 533 and the data-storing unit 
535. 

[88] Hereinafter, the aforementioned process will be described in detail 
with reference to the accompanying drawings. 

[89] FIG. 10 shows a processing procedure for a case where data required 
by the main control unit 300 do not exist in the data-storing unit 535. 
[90] As shown in FIG. 10, if the read operation is requested by the main 
control unit 300 together with a selection signal of a specific memory address 
in the serial flash 100 (1), the controller 500 determines whether a page at an 
address corresponding to the memory address selected in the tag-storing unit 
533 is written on the data-storing unit 535 (2). 

[91] In the case of the present embodiment, since the page to which the 
relevant data belong is not stored in the data-storing unit 535, the controller 
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500 transmits the read command for the memory address required to be read 
by the main control unit 300 to the serial flash 100 (3), and reads the entire 
page to which the relevant memory address belongs (4). 

[92] If the page is completely read, the controller 500 stores the read page 
in the buffer, extracts the required data and transmits the data to the main 
control unit 300 (5). The read page and its storage information are written on 
the tag-storing unit 533 and the data-storing unit 535 (6). 
[93] FIG. 1 1 shows a processing procedure for a case where data required 
by the main control unit 300 exist in the data-storing unit 535 as a result of 
repeat of the aforementioned processes. 

[94] As shown in FIG. 11, if the read operation is requested by the main 
control unit 300 together with the selection signal of the specific memory 
address in the serial flash 100 (1), the controller 500 determines whether the 
page at the address corresponding to the memory address selected in the tag- 
storing unit 533 is written on the data-storing unit 535 (2). 
[95] In the case of the present embodiment, since the page to which the 
relevant data belong is stored in the data-storing unit 535, the controller 500 
extracts the required data from the data-storing unit 535 by referring to the 
storage information searched through the tag-storing unit 533 (3). 
[96] The extracted data are transmitted to the main control unit 300 by the 
controller 500 (4). 



20 



[97] According to the present invention, the XIP function can be supported 
by the serial flash through the serial flash control apparatus that accesses the 
serial flash, reads a required page and provides it to the main control unit. 
[98] In addition, an auxiliary storage device can be provided at the same or 
lower cost by substituting the ROM or NOR flash with the serial flash 
memory chip including the serial flash controller capable of supporting the 
XIP function. 

[99] Although the present invention has been described in connection with 
the embodiment illustrated in the drawings, the embodiment is merely for 
illustrative purposes. It will be understood by those skilled in the art that 
various modifications and other equivalent embodiments can be made thereto. 
[100] Therefore, the true technical scope of the invention should be 
construed as being defined by the appended claims. 
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